CVE-2022-45299: Webbrowser Project Webbrowser

Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days.

An issue in the IpFile argument of rust-lang webbrowser-rs v0.8.2 allows attackers to access arbitrary files via supplying a crafted URL.

Affected products

• Webbrowser Project Webbrowser: before 0.8.3 (fixed in 0.8.3)

Published 2023-01-13. Last modified 2026-06-17.